ltassio 0 Denunciar post Postado Maio 19, 2015 Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:53:19, on 19/05/2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17416) Boot mode: Normal Running processes: C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Windows\SysWOW64\cmd.exe C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe c:\PROGRA~2\mcafee\SITEAD~1\saui.exe C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui /runkey O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Laerte\AppData\Roaming\Spotify\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_906EEE015B2FB4D77E8D6E1452C09C50] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\Laerte\AppData\Local\Apps\2.0\K1EQRB09.0QH\9DYPCK9M.A9Y\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe O4 - HKCU\..\Run: [spotify] "C:\Users\Laerte\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized O4 - HKLM\..\Policies\Explorer\Run: [btvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe" O4 - Startup: Dropbox.lnk = Laerte\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: Enviar para o OneNote.lnk = C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 O8 - Extra context menu item: Capturar esta página - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1 O8 - Extra context menu item: Capturar favorito - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0 O8 - Extra context menu item: Capturar imagem - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4 O8 - Extra context menu item: Capturar seleção - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3 O8 - Extra context menu item: Capturar URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Nova nota - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Clique para Telefonar do Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Clique para Telefonar do Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: www.bancobrasil.com.br O15 - Trusted Zone: www14.bancobrasil.com.br O15 - Trusted Zone: www2.bancobrasil.com.br O15 - Trusted Zone: www.bb.com.br O15 - Trusted Zone: http://www.bb.com.br O15 - Trusted Zone: *.dell.com O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O20 - Winlogon Notify: GbPluginBb - C:\Program Files (x86)\GbPlugin\gbieh.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AtherosSvc - Windows ® Win 7 DDK provider - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: Dell Data Vault (DellDataVault) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVault.exe O23 - Service: Dell Data Vault Wizard (DellDataVaultWiz) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe O23 - Service: Dell Product Registration Manager (DellProdRegManager) - Aviata, Inc. - C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel® HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing) O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel® Capability Licensing Service TCP IP Interface - Intel® Corporation - c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe O23 - Service: McAfee CSP Service (mccspsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Anti-Malware Core (mfecore) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: My Dell Client Framework - Dell Inc. - C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - CyberLink - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Dell SupportAssist Agent (SupportAssistAgent) - Dell Inc. - C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: Warsaw Technology - GAS Tecnologia LTDA - C:\Program Files\Diebold\Warsaw\core.exe O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: Wyse PocketCloud (WysePocketCloud) - Unknown owner - C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe O23 - Service: Wyse RemoteAccess (WyseRemoteAccess) - DELL Inc. - C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe -- End of file - 16804 bytes Compartilhar este post Link para o post Compartilhar em outros sites
caedurodrigues 19 Denunciar post Postado Maio 19, 2015 Boa tarde Itassio, Baixe: <ZHPDiag ><> ( ...Nicolas Coolman) Salve-o no Disco local (C ou D). Desabilite seu antivírus, e execute ZHPDiag.exe para instalar. Execute o ícone do pergaminho! Clique na opção "COMPLETA" e aguarde a conclusão. Clique OK e,ao concluir, poste o relatório! ( ZHPDiag.txt ) Obs: O relatório por ser extenso deve ser postado em um desses sites: Acesse: <> Ou acesse:<> Maiores informações:<Link> << Hospedagem ! Um grande abraço. :thumbsup: Compartilhar este post Link para o post Compartilhar em outros sites
ltassio 0 Denunciar post Postado Maio 19, 2015 Obrigado pelo altruísmo e disponibilidade em ajudar.Aqui está o log: http://cjoint.com/?EEuboN88DhF Compartilhar este post Link para o post Compartilhar em outros sites
caedurodrigues 19 Denunciar post Postado Maio 20, 2015 Bom dia Itassio, Desative temporariamente seu antivirus, antispywares e firewall, para não causar conflitos. Baixe: <> (...par Xplode) Ou aqui >>AdwCleaner<< Salve-a na sua Desktop (área de trabalho). Feche todos os programas e navegadores de internet abertos. Usuários do Windows Vista ou Windows 7,clique com o direito do mouse sobre o arquivo AdwCleaner.exe,depois clique em: Clique em Examinar, para iniciar o escaneamento! Ao término, clique em limpar Copie o log ou clique "Relatório". Poste: >>C:\AdwCleaner\AdwCleaner [s0].txt<< Baixe:<> <(...by Oleg N. Scherbakov)> Salve-o no desktop! Desabilite seu antivírus! Para Windows 7, clique direito em JRT.exe e execute-o como Aguarde a conclusão e poste o relatório. ( JRT.txt ) Baixe:<> (...by Malwarebytes) Dê um duplo-clique no mbam-setup.exe para instalar o programa. Desmarque a caixa: "Ativar trial gratuito do Malwarebytes Anti-Malware PRO" Clique "Concluir". Atualize o programa ! Escolha Verificar! >> Verificação Personalizada >> Configurar Varredura! Marque as caixinhas conforme figura abaixo: Desabilite programas de proteção,ao executar o malwarebytes. Para Windows Vista ou 7, clique direito no arquivo e execute-o como administrador. Ps: Para determinadas infecções,o programa pedirá reboot. << Confirme! Ao concluir,clique em "Ok" >> "Ver Resultados" >> "Remover Selecionados". O log é automaticamente salvo pelo MBAM, e para vê-lo clique na aba Histórico >> Logs de aplicativos. Utilize o formato .txt para exportar o log. NÃO UTILIZAR O FORMATO .XML PARA EXPORTAR O LOG. O log de Proteção e desnecessário para uma Análise, exporte sempre o log Correto. Um grande abraço. :thumbsup: Compartilhar este post Link para o post Compartilhar em outros sites
ltassio 0 Denunciar post Postado Maio 20, 2015 Caedurodrigues, não consegui rodar o AdwClenar e o JTR, como mostram as imagens a seguir:http://s13.postimg.org/97c9xuxqv/Windows_Smart_Screen_pro_be_JRT.jpghttp://s18.postimg.org/aachzurbd/Adwcleaner_n_o_funciona.jpgConheço o Adwcleaner e uso algumas vezes, creio que não consegui rodar justamente por estar com o antivírus desligado.Aqui está o relatório do Malware Bytes: Malwarebytes Anti-Malware www.malwarebytes.org Data da Verificação: 20/05/2015 Hora da Verificação: 10:32:30 Arquivo de Log: Log de Escaneamento Malware Bytes.txt Administrador: Sim Versão: 2.01.6.1022 Base de Dados de Malware: v2015.05.20.03 Base de Dados de Rootkit: v2015.05.16.01 Licença: Grátis Proteção de Malware: Desabilitado Proteção de Site Malicioso: Desabilitado Auto-Proteção: Desabilitado SO: Windows 8.1 Processador: x64 Sistema de Arquivos: NTFS Usuário: Laerte PC Tipo da Verificação: Verificação Personalizada Resultado: Terminado Objetos Verificados: 635065 Tempo Decorrido: 3 hr, 58 min, 39 seg Memória: Habilitado Inicialização: Habilitado Sistema de Arquivos: Habilitado Arquivos Compactados: Habilitado Rootkits: Habilitado Heurística: Habilitado PUP: Habilitado PUM: Habilitado Processos: 0 (Nenhum item malicioso detectado) Módulos: 0 (Nenhum item malicioso detectado) Chaves de Registro: 0 (Nenhum item malicioso detectado) Valores de Registro: 0 (Nenhum item malicioso detectado) Dados de Registro: 0 (Nenhum item malicioso detectado) Pastas: 0 (Nenhum item malicioso detectado) Arquivos: 0 (Nenhum item malicioso detectado) Setores Físicos: 0 (Nenhum item malicioso detectado) (end) Compartilhar este post Link para o post Compartilhar em outros sites
caedurodrigues 19 Denunciar post Postado Maio 20, 2015 Boa tarde Itassio, para a JRT, execute-a novamente quando surgir aquela mensagem do SmartScreen, clique em mais informações e depois em executar assim mesmo. Quanto à AdwCleaner execute-a em modo de segurança com rede. Conseguindo executar as ferramentas , poste o relatório por favor. Informe da mesma forma caso não consiga. Um grande abraço. Compartilhar este post Link para o post Compartilhar em outros sites
ltassio 0 Denunciar post Postado Maio 21, 2015 Amigos, após as verificações que faltavam, o notebook segue lento. Pelo gerenciador de tarefas, mostra que o disco várias vezes está sendo usado em 100% e o processo Softhink Agents Service está consumindo muita memória.Relatório do Adwcleaner # AdwCleaner v4.204 - Relatório criado 20/05/2015 às 20:58:53 # Atualizado 12/05/2015 por Xplode # Base de dados : 2015-05-12.2 [Local] # Sistema operacional : Windows 8.1 Single Language (x64) # Usuário : Laerte PC - PC-LAERTE # Executando de : C:\Users\Laerte\Desktop\adwcleaner_4.204.exe # Opção : Limpar ***** [ Serviços ] ***** [#] Serviço Excluído : 0261901432162147mcinstcleanup ***** [ Arquivos / Pastas ] ***** Pasta Excluído : C:\ProgramData\apn Pasta Excluído : C:\Users\Laerte\AppData\Local\Temp\apn Pasta Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niloccemoadcdkdjlinkgdfekeahmflj_0.localstorage Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niloccemoadcdkdjlinkgdfekeahmflj_0.localstorage-journal Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_iphone-explorer.en.softonic.com_0.localstorage Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_iphone-explorer.en.softonic.com_0.localstorage-journal Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_iphone-explorer.softonic.com.br_0.localstorage Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_iphone-explorer.softonic.com.br_0.localstorage-journal Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage Arquivo Excluído : C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal ***** [ Tarefas agendadas ] ***** Tarefa Apagado : DriverEasy Scheduled Scan ***** [ Atalhos ] ***** ***** [ Registro ] ***** ***** [ Navegadores ] ***** -\\ Internet Explorer v11.0.9600.17416 -\\ Mozilla Firefox v37.0.2 (x86 pt-BR) -\\ Google Chrome v42.0.2311.152 [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Apagado [search Provider] : hxxp://www.ufal.edu.br/@@search?SearchableText={searchTerms} [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Apagado [search Provider] : hxxp://www.ufal.edu.br/search?SearchableText={searchTerms} [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Apagado [search Provider] : hxxp://correios.com.br/para-voce/@@search?SearchableText={searchTerms} [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Apagado [search Provider] : hxxp://www.softonic.com.br/s/{searchTerms} [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Apagado [Extension] : lbfehkoinhhcknnbdgnnmjhiladcgbol [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Apagado [Extension] : niloccemoadcdkdjlinkgdfekeahmflj [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Apagado [Extension] : aaaaadgepjkdffhjbkfjgnnffnfcffbg [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Apagado [Homepage] : hxxp://www.search.ask.com/?gct=hp [C:\Users\Laerte\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Apagado [Default_Search_Provider_Data] : {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}{google:contextualSearchVersion}ie={inputEncoding}", "usage_count": 0 } }, "extensions": { "settings": { "aaaaadgepjkdffhjbkfjgnnffnfcffbg": { "ack_prompt_count": 1, "active_permissions": { "api": [ "homepage", "management", "nativeMessaging", "searchProvider", "startupPages", "storage", "tabs", "webRequest", "webRequestBlocking" ], "explicit_host": [ "hxxp://*/*", "hxxps://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "*://*.ask.com/ ************************* AdwCleaner[R0].txt - [1205 bytes] - [05/12/2014 09:41:36] AdwCleaner[R1].txt - [1222 bytes] - [05/12/2014 10:12:23] AdwCleaner[R2].txt - [985 bytes] - [05/12/2014 21:55:04] AdwCleaner[R3].txt - [2431 bytes] - [06/12/2014 16:46:16] AdwCleaner[R4].txt - [2586 bytes] - [11/12/2014 20:07:21] AdwCleaner[R5].txt - [2140 bytes] - [19/03/2015 10:24:03] AdwCleaner[R6].txt - [324 bytes] - [20/05/2015 09:59:39] AdwCleaner[R7].txt - [324 bytes] - [20/05/2015 10:00:41] AdwCleaner[R8].txt - [324 bytes] - [20/05/2015 10:02:04] AdwCleaner[R9].txt - [5750 bytes] - [20/05/2015 20:56:52] AdwCleaner[s0].txt - [1206 bytes] - [05/12/2014 09:48:31] AdwCleaner[s1].txt - [1272 bytes] - [05/12/2014 10:13:53] AdwCleaner[s2].txt - [1042 bytes] - [05/12/2014 21:57:46] AdwCleaner[s3].txt - [2471 bytes] - [06/12/2014 16:49:18] AdwCleaner[s4].txt - [2628 bytes] - [11/12/2014 20:11:31] AdwCleaner[s5].txt - [2218 bytes] - [19/03/2015 10:30:11] AdwCleaner[s6].txt - [5614 bytes] - [20/05/2015 20:58:53] ########## EOF - C:\AdwCleaner\AdwCleaner[s6].txt - [5673 bytes] ########## Relatório do JRT~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.7.5 (05.20.2015:1) OS: Windows 8.1 Single Language x64 Ran by Laerte PC on 20/05/2015 at 21:08:53,34 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks Successfully deleted: [Task] C:\Windows\system32\tasks\Optimize Start Menu Cache Files-S-1-5-21-3016073059-973996076-60107898-1001 Successfully deleted: [Task] C:\Windows\system32\tasks\PCDEventLauncherTask Successfully deleted: [Task] C:\Windows\system32\tasks\PCDoctorBackgroundMonitorTask Successfully deleted: [Task] C:\Windows\tasks\DriverEasy Scheduled Scan.job ~~~ Registry Values ~~~ Registry Keys ~~~ Files Successfully deleted: [File] C:\Windows\wininit.ini Successfully deleted: [File] C:\Windows\prefetch\DRIVEREASY.EXE-9990B30E.pf Successfully deleted: [File] C:\Users\Laerte\appdata\local\google\chrome\user data\default\local storage\http_static.audienceinsights.net_0.localstorage Successfully deleted: [File] C:\Users\Laerte\appdata\local\google\chrome\user data\default\local storage\http_static.audienceinsights.net_0.localstorage-journal Successfully deleted: [File] C:\Users\Laerte\appdata\local\google\chrome\user data\default\local storage\https_static.olark.com_0.localstorage Successfully deleted: [File] C:\Users\Laerte\appdata\local\google\chrome\user data\default\local storage\https_static.olark.com_0.localstorage-journal ~~~ Folders Successfully deleted: [Folder] C:\ProgramData\pcdr Successfully deleted: [Folder] C:\Users\Laerte\appdata\locallow\pcdr Successfully deleted: [Folder] C:\Users\Laerte\AppData\Roaming\pcdr Successfully deleted: [Folder] C:\Windows\syswow64\ai_recyclebin ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 20/05/2015 at 21:12:45,89 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Compartilhar este post Link para o post Compartilhar em outros sites
caedurodrigues 19 Denunciar post Postado Maio 21, 2015 Bom dia Itassio, Baixe:<> <(...by Farbar)> Ou aqui:<Farbar Recovery Scan Tool 64-bits> Salve-a na Área de trabalho ! Execute a ferramenta ! Clique "Yes" >> "Scan". Verifique se as caixinhas em "Whitelist" estão assinaladas. Em "Optional Scan",deixe marcada a checkbox "Addition.txt". Marque também a checkbox 90 Days Files Será gerado o relatório! (FRST.txt) Ps: Será gerado,também,o relatório "Addition.txt" que estará disponibilizado na 1ª execução da ferramenta. Acesse: <> Ou acesse:<> Maiores informações:<Link> << Hospedagem ! ATENÇÃO: para o correto funcionamento da ferramenta, ela tem de estar diretamente na área de trabalho, não pode ficar em uma pasta. Compartilhar este post Link para o post Compartilhar em outros sites
caedurodrigues 19 Denunciar post Postado Maio 23, 2015 PROBLEMA RESOLVIDO Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico. Compartilhar este post Link para o post Compartilhar em outros sites
